Ubuntu Servers :: Xinetd 754/tcp Kerberos Propagation Port Can't Open?
Apr 6, 2010I can't open 754/tcp por for kerberos propagation, the service is krb_prop.The file /etc/xinetd.conf:
Code:
defaults
{
[code]....
I can't open 754/tcp por for kerberos propagation, the service is krb_prop.The file /etc/xinetd.conf:
Code:
defaults
{
[code]....
I can seem to open port 25565 for a java application (executable jar)
I'm running ubuntu server 9 thoroughly up to date code...
Yet connections to port 25565 fail when I have the firewall enabled (sudo ufw enable)
For example canyouseeme.org says "Error: I could not see your service on port (25565) Reason: Connection timed out"
And connections to port 25565 _DO WORK_ when I disable the firewall (sudo ufw disable)
canyouseeme.org says "Success: I can see your service on port (25565)"
I have two computers on a LAN. (This is history not a Bazaar question, although I have one of those too) One of them (Ubuntu 9.04) Im using as a Bazaar repository over sftp. Its been working fine for about a year. Then we had a thunderstorm that knocked out our Internet service for a couple of days. When it came back up everything is working fine accept I could no longer commit to the server. A little detective work showed that ssh was not running on the server. I started it and Bazaar then couldnt find the repository files. I still suspected an ssh problem, but port scans from both computers showed port 22 open on the server and I could do a ssh login from the client ok. Then I started fiddling with ssh on the server and now I have ssh problems on top of the Bazaar problems.
On the server I deleted then regenerated the ssh keys. Ive done
sudo /etc/init.d/ssh reload
sudo /etc/init.d/ssh start
I get a normal starting message and ps ef |grep ssh
shows /usr/sbin/sshd running. But the port scan does not show 22 open and I get connection refused at the client.
Is it possible to check if a particular port is open for a particular ip in the terminal?
View 4 Replies View RelatedI am configuring an internal only IMAP server for archival emails. I am absolutely baffled why my connection is being refused. UFW is disabled and IPTABLES has a rule to allow all connections on 143 and 993. When I telnet this response is given:
Code:
telnet localhost 143
Trying 127.0.0.1...
telnet: Unable to connect to remote host: Connection refused
Even nmap shows the port closed. Here is my iptables rule:
HTML Code:
-A ufw-user-input -p udp -m udp --dport 143 -j ACCEPT
I tried to see if my port was open but got a message saying Error: I could not see your service on 58.164.165.88 on port (80) Reason: Connection refused could someone us out here
View 2 Replies View RelatedI am running lmgrd on CentOS5, but it returns Failed to open the TCP port number in the license. The port is 27000, how can I open that port?
View 5 Replies View RelatedStrange issue here when trying to verify firewall on Server 8.04. No ftp service running at all on server, but both nmap and netcat report port 21 as being open, even though it isn't.I am 100% sure that port 21 is not actually accessible and iptables rules are fine. Trying to connect to the port fails, yet nmap and netcat seem to report a "false positive"?Have also checked on a number of other servers I'm running, and this "false positive" seems to apply to all of them.
View 1 Replies View RelatedI've asked this question more or less before on stackoverflow and believed it to be solved (hence accepted the answer) but it turns out it wasnt solved.In simple terms, I've written a python script which just outputs text constantly to stdout, thats all it does 24/7. I've linked it to this xinetd file
service myservice
{
instances = 1
[code].....
I am trying to run svnserve on startup on an Ubuntu Server 10.04 machine using xinetd
My repositories are at /home/svn, so the directory should be the same as in the example. Following the example, the owner should be www-data, I assume. (Is that right?) I've also tried the admin user account as as the svnowner (the one used to set the svnserver up).
I've never done any shell scripting, so I tried xinetd instead of using the startup script. But if I don't get any feedback for using xinetd that will be my next course of option.
For reference, the link above suggests adding
Code:
svn stream tcp nowait svnowner /usr/bin/svnserve svnserve -i -r /home/svn
to the /etc/inetd.conf file, replacing svnowner and /home/svn to the appropriate values (although I'm not 100% sure what those should be). I assume since I did a chown on the repo to www-data that www-data is the owner I need to put in that line, but it doesn't work.
It's just annoying to have to ssh in and type
Code:
svnserve -d --foreground -r /home/svn
every time I reboot.
I've currently got Ubuntu server configured so that clients can login using LDAP user accounts that I've created using ldapadduser (from the ldapscripts package).
I've also got NFS exports working so that /home can be exported to clients. Kerberos authentication is enabled for NFS and clients require a nfs/clienthostname.domain principal to be able to mount the NFS share.
However, I now realise that for LDAP users to be able to access the mount they need their own Kerberos principal. If I run kinit dan@DANBISHOP.ORG then I can access /home/dan as user dan otherwise I get permission denied.
My question then is how best to proceed... is there a way to configure the client/server so that once a client has mounted the nfs share using Kerberos, all users can access it without their own principal?
It seems more usual to create kerberos principles for all users, but then how does one manage users? Using ldapscripts is very easy, but if the admin then has to manually create kerberos principals everytime, it could become very tedious. Furthermore how do users change their password if kerberos is used for authentication?
I have installed servers(10.04 LTS Server) with Kerberos + LDAP, now I can ssh to all those servers and login with kerberos principle. But when I want to change password, I got such error:
Code:
Current Kerberos password:
Enter new Kerberos password:
Retype new Kerberos password:
Password change rejected: Password not changed.
Kerberos database constraints violated while trying to change password.
passwd: Authentication token manipulation error
passwd: password unchanged
I have search this issue but cannot any useful information. Would someone give me a direction?
i have 2 machines:
first machine: Samba
second machine: LDAP + Kerberos
I found to many tutorials that samba is installed on the same machine as LDAP + Kerberos. is there like a tutorial how samba can be integrated with kerberos from different machine?
I recently installed Fedora 13 on VMware 7 environment without X window. sshd did work fine, but when I tried to put it into xinetd, it doesn't work any more. Here is what I have done so far :
I stopped sshd. #service sshd stop
and I configured xinetd.conf like below.
Quote:
#
# This is the master xinetd configuration file. Settings in the
# default section will be inherited by all service configurations
# unless explicitly overridden in the service configuration. See
# xinetd.conf in the man pages for a more detailed explanation of
# these attributes.
[Code]....
I don't know what I did wrong with them. I configured xinetd.conf, and I made service configuration file 'ssh' in /etc/xinetd.d, and I restarted xinetd.
What am I supposed to do to make a life on my sshd within xinetd ?
I am having trouble with setting up BIND9 for 6 virtual servers that use ubuntu x64 v10.10. I have main server running ubuntu as well. host name is xeonserver I would like to explain my setup first.
my router ip: 192.168.1.1/24 host server for VMs ip: 192.168.1.2/24 Then on qemu my virtual machines are in 10.0.0.0/24 network, gateway to my router is 10.0.0.1
1. kerberos.xeonserver (not configured yet) 10.0.0.2
2. dns.xeonserver (the one I have trouble with) 10.0.0.3
3. mysql.xeonserver (not configured yet) 10.0.0.4
4. apache.xeonserver (not configured yet) 10.0.0.5
5. ftp.xeonserver (not configured yet) 10.0.0.6
6. mail.xeonserver (not configured yet) 10.0.0.7
To configure it I followed instructions found on [URL]
[Code]...
I installed Subversion and xinetd and added Subversion as a service to xinetd.conf as instructed at http://www.codeandcoffee.com/2007/06...rver-on-linux/
I restarted the xinetd service using /sbin/service. however, Subversion does not end up being listed in /etc/xinetd.d nor does it seem to be running and occupying the port altogether.
I have set up a 389 DS server and a kdc. However there is not a howto or any document concerning setting up the DS as a Kerberos database back-end. Nor is there a 389 DS forum, so I am asking here and hopefully some of you could possibly help or throw in some light as to this kind of setup.I have read the 389 DS features page and the Redhat documents but there is no reference to this feature.
View 3 Replies View RelatedIf I forward port 80 to port 3128 for squid with an iptable rule, does port 3128 have to be open on the firewall or is this all routed behind the firewall?
View 4 Replies View Relatedwhen ever some error happens in the functions, they are not propagated and err_out function is not called.I tried #!/bin/bash -E too; that way when there is an error the script exits but what I need is error to be propagated properly to the handler.
View 1 Replies View RelatedI am trying to configure windbind and kerberos on my Fedora 15 to connet to my Windows 2003 server environment. But I keep getting this message:
Code:
libads/kerberos.c:333(ads_kinit_password)
kerberos_kinit_password ECP01BCA$@MSA.MDSA.NET failed: Client not found in Kerberos database
Heres my krb5.conf:
Code:
[logging]
default = FILE10000:/var/log/krb5lib.log
[Code]...
I have sendmail running on my centOS 4.6. My lamp server also runs on it. I want to send mail through php mail function. when i execute php page, which fires the mail function, it takes so much long tim1 say even 1 minute, and at last displays that message sent successfully. Suppose, destination address is [URL].... I did not get any mail there. My server is running in LAN. I checked the status of sendmail, it shows me that it ios running. when i issue "nmap localhost" it shows me that SMTP port 25 is open, but when i issue "nmap myserver" (192.168.1.20 myserver ( written in hostfile)), it does not show that SMTP port is open.
I checked the /var/log/maillog, one person in my previous post advice me to see that. There it shows that message is accepted for delivery...but i do not get any mail in my destination, even not in spam folder. One more confusion is that, in my case my server is in LAN and if I am at all enable to open the SMTP port on it, does i need to open SMTP port on my router (which connects my LAN to internet) also needs to open? I think no, because SMTP is application layer protocol, it will wrap my mail in IP packet, which router just need to forward. am i right?
Ok For some reason I open my ports in security and firewall. I open ssh and other ports and port 7001 for example but when I go to check to see if they are open or try to connect to them. It shows that they are still closed. I am using - [URL] Also yes my ports are open on my router. I know my router works fine with opening ports because I have shoutcast setup on another computer with xp that is currently running. I am willing to pay for who can ever get this fixed for me...
I open the ports in graphical mode.
I've been reading the RUTE Linux book and they recommend the use of xinetd to run services. However, this book is already a bit outdated, and I was wondering whether this still applies to today's circumstances?
View 4 Replies View RelatedI just installed apache. I didn't change the configuration files at all except add Quote: # added servername to avoid the could not determine fqdn error ServerName myname.homelinux.org to apache2.conf. Apache is working locally (I get the `it's working' screen at [URL]). However, I cannot access my computer from an external computer by going to [URL], which is equivalent to [URL] -- [IP address changed slightly for privacy] Here is a screenshot to my router settings. I disabled the filter for port 80 on the router. here shouldn't be a firewall, unless it's automatically installed with ubuntu 10.4. (sudo ufw status says `inactive'.)
I checked my ports from [URL] and indeed port 22 is open (ssh-ing into my computer externally is not a problem), whereas port 80 is closed. What step in opening up port 80 am I missing? (I also made sure my ISP isn't blocking port 80.)
I am trying to access my desktop remotely via VNC. I can already access my computer using ssh, and I managed to open port 22 on my router:
Now I must open port 5900 for VNC, and I think I did exactly the same thing:
Using [url](a port check service), however, my port 22 is OPEN and my port 5900 is CLOSED. Yes, I restarted my router after making the changes.
I heard when running Ubuntu I need to set it to open with one port. I had a friend ran Ubuntu on his laptop at school and had other Ubuntu users at school got access to his computer, is that possible?
View 2 Replies View Relatedneeding to open a port in ubuntu, then use it for my VirtualBox Pc.My VirtualBox is running - Windows XP I have a router connected to my network - Linksys WRT54G Now lets begin, I have tried opening via there router homepage. But when I go to [URL] and test port 4900 is still says that it is closed.
View 3 Replies View RelatedTor open port 23 for telnet. Is this normal ?
View 3 Replies View RelatedNo matter what I do, i cannot get port 3100 to open. This is for a new MMO i am CBT on. I know it works on windows because that is how I installed it and played. But I prefer being on Linux. Majority of all other MMOs work fine. Just this one has to have udp 3100 open.
The following is a rough output of all the methods I have tried with no success. As you can see I have done some extensive research first before posting here.
Now its become a lil bit of an obsession.
I cannot get the following command to work:
And yes I tried the "spaces" in different places thinking that was the prob. So i cannot see if 3100 is in the list or not
I eventually turned on the firewall "ufw enable" add the port there, and output:
Some references
[url]
Firewall stuff: [url]
I even manually went into the router and turned it on there.
I add these lines for startup purposes.
Do I need to do something in "wine" ?
I feel i am starting to repease myself
results of "iptables -L"
Code:
I have an n900 phone and I'm trying to ssh to my desktop but I'm getting an error:
ssh: connect to host 58.xx.xx.xx port 22: Connection refused
I recently started using a router for I wanted to connect to net even with n900. I've tried to open the port from the setup page of the router however it doesn't seem to work. (find below the screenshot of setup page).
I've tried to ssh through slackware I've got as a virtual machine and I have the same problem although I was able to ssh through slackware before I started using the router.